Privacy policy on the use of the ATM Replenisher App (“App” in the following)
Thank you for your interest in our App. We take the protection of your personal data very seriously. In the following, we would like to inform you about the collection, processing and use of your personal data when using our App and about your rights. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, telephone number, IP address, but also user behaviour etc.
Who is responsible for data processing and whom can you contact?
The responsible person within the meaning of the General Data Protection Regulation (GDPR) is: tiramizoo GmbH, Wilhelm-Hale-Str. 50, 80639 Munich, Germany email: datenschutz@tiramizoo.com Name and contact details of the data protection officer: Michael Mayer, Wilhelm-Hale-Str. 50, 80639 Munich, Germany, email: datenschutz@tiramizoo.com
What data we collect from you when you visit our website
When you use our App, information is automatically transmitted from your device to the server of our app. While using the App, all activities directly related to the App are recorded, from logging in to the app to the processes in the app to logging out of the App. The following information, among others, is collected without your intervention and stored until automated deletion:
- IP address of the requesting end device,
- Date and time of access,
- Information on the operating system of the terminal device used,
- end devices from which access is made,
Location Data
What We Collect: The App collects GPS location data from the device only when the user is actively executing a route. If the user is not executing a route, no location data is collected.
How We Use It: The location data is transmitted to our management web interface to:
- Report the real-time location to the management team,
- Recalculate and update the estimated time of arrival (ETA) to various stops along the route.
Purpose: This enables efficient route management and ensures accurate delivery or service scheduling.
Retention: Location data is stored only for as long as necessary to fulfill these purposes and is deleted once the route is no longer relevant.
Recording of GPS data during the App usage period.The temporary storage of this data is necessary to enable and to ensure the functionality of the App. With the help of this data, we also gain statistical insights into how our App is used. In addition, we collect the data in order to be able to trace and prevent unauthorised access to the web server and misuse of the web pages and to secure our information technology systems.
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interest lies in achieving the purposes described above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
The data is deleted when it is no longer necessary to achieve the purposes. Log files are deleted after 7 days at the latest.
What data do we collect from you when you contact us via our contact form or by email?
If you contact us by email, we store the data you provide (your email address, your name if applicable and your telephone number). This is done solely for the purpose of replying to you or, if necessary, contacting you again at a later date regarding the subject of your enquiry. The legal basis for the data processing in this regard is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interest lies in processing your enquiry. If the email contact is aimed at concluding a contract, the additional legal basis for the aforementioned processing is Art. 6 (1) sentence 1 lit. b) DSGVO.
If you contact us via our contact form, we store the data you provide (email address, name, telephone number, comment) to process your enquiry. The legal basis for this is Art. 6 para. 1 p. 1 lit. b) DSGVO, as the data processing is necessary for the implementation of pre-contractual and contractual measures that take place in response to your enquiry.
Your data will only be processed for the purpose of answering your enquiry and will then be deleted immediately, provided that there are no legal obligations on our part to retain the data. Your data will not be passed on to third parties.
If you wish to object to the processing of your data transmitted by email, please contact datenschutz@tiramizoo.com.
Who receives your data?
Within our company, only those departments that need your data to fulfil our contractual and legal obligations will have access to it.
Service providers and vicarious agents employed by us may also receive data for these purposes.
Recipients of personal data may be, for example:
Processors to whom we transfer personal data in order to carry out our business relationship with you. In detail: Companies that provide us with server storage space, data destruction, payment transactions.
Further data recipients may be those bodies for which you have given your consent to the transfer of data.
Data transmission to third parties
We transfer your data to service providers who support us in the operation of our App and the associated processes within the scope of order processing pursuant to Art. 28 DSGVO. Our service providers are strictly bound by instructions and contractually obligated to us accordingly. We reserve the right to use the following service providers for app analysis:
MIXPANEL S.L., Avenida Diagonal, 442 - P. 3 PTA. 1 08037, Barcelona, Spain
We use services from MIXPANEL S.L. to analyse usage data. Statistical analyses of the use of the App are to be carried out in order to further optimize the App. The identification of a user should be excluded. The data processing is carried out on the legal basis of Art. 6 para. 1 lit. f DSGVO. Our legitimate interest is the optimisation of our online offer. As the privacy of our visitors is particularly important to us, the details of the users' end devices are anonymised at the earliest possible stage and login or device identifiers are converted into a unique key that is not assigned to a person. The service provider does not use the data in any other way, combine it with other data or pass it on to third parties.
You can object to the aforementioned data processing at any time via the following link, as it is carried out on a personal basis. Please send your objection to: datenschutz@tiramizoo.com
Further information will be provided to you by the service provider when you register via our App. How long my data will be stored
We process and store your personal data for as long as and to the extent necessary to fulfil our contractual and legal obligations. We observe the principle of storage limitation, i.e. we delete your data as soon as we no longer need it and are also not legally obliged to retain it.
Will data be transferred to a third country?
Data transfer to countries outside the EU or the EEA (so-called third countries) does not take place in principle, unless it is expressly mentioned in this data protection declaration.
Von folgenden Dienstleistern, die wir für die Funktionsfähigkeit der App nutzen, werden Daten in der EU bzw. EWR oder Singapur verarbeitet. Der jeweilige Hauptsitz der Dienstleister ist wie folgt aufgelistet:
AWS Singapore: Amazon Web Services Singapore Private Limited, 23 Church Street, Capital Square, Unit 10-01 to 10-04, 049481, Singapore
AWS Germany (Europe): Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg
Heroku: Heroku Inc., 321 11th St, San Francisco, CA, 94103, United States of America
TomTom: TomTom International B.V., De Ruijterkade 154 (1011 AC) Amsterdam, The Neterhlands
Is there an obligation to provide my personal data?
In principle, the provision of your personal data is voluntary.
What rights do you have and how can you exercise them?
You have the following rights in relation to personal data relating to you:
Right of access pursuant to Art. 15 of the GDPR: You have the right to request confirmation as to whether personal data concerning you are being processed; if this is the case, you have the right to be informed about these personal data and to receive the information listed in detail in Article 15 of the GDPR.
Right to have inaccurate personal data corrected or completed in accordance with Article 16 of the GDPR: You have the right to request without delay the correction of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.
Right to erasure (right to be forgotten) pursuant to Art. 17 DSGVO: You also have the right to request that personal data concerning you be deleted without delay if one of the reasons listed in detail in Article 17 of the GDPR applies, e.g. if the data is no longer required for the purposes pursued.
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of processing if one of the conditions listed in Article 18 of the GDPR applies, e.g. if you have objected to the processing pursuant to Article 21 of the GDPR, for the duration of any review of whether our legitimate interests override yours.
Right to object to processing pursuant to Article 21 of the GDPR: If data is collected on the basis of Art. 6 para. 1 p. 1 lit. f) DSGVO (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right to data portability pursuant to Art. 20 of the GDPR: In certain cases, which are detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.
Right to withdraw your consent pursuant to Art. 7 (3) sentence 1 DSGVO: You have the right to revoke your consent at any time with effect for the future without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Right of appeal to a supervisory authority pursuant to Art. 77 DSGVO: Pursuant to Art. 77 DSGVO, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. The right of complaint may in particular be asserted before a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement.
If you wish to exercise your right of revocation or objection, simply send an email to datenschutz@tiramizoo.com
Data security
We have taken technical and organisational measures to protect your data from unwanted access as comprehensively as possible. We use an encryption process on our websites. Your data is transferred from your computer to our server and vice versa via the internet using TLS encryption. You can recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.
Amendment of the privacy policy
We reserve the right to change this data protection declaration in compliance with data protection law. You will find the current version at this point or at another corresponding, easy-to-find point on our website.
Status August 2024